Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: The Weakest Link: How “Transit Hubs” are Quietly Draining Crypto and Stealing AI Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:06:39 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Agents #API Aggregators #API security #cybersecurity #data exfiltration #encryption #infosec #LLM infrastructure #Man in the Middle #supply chain attack
Daily CyberSecurity
The Weakest Link: How "Transit Hubs" are Quietly Draining Crypto and Stealing AI Data
New research reveals massive security gaps in AI API aggregators. From stolen crypto to leaked tokens, learn why your API hub might be a Man-in-the-Middle trap.
11 views
Daily Writeups
⤷ Title: Critical SSRF Flaw Discovered in Axios – CVE-2025-62718 (CVSS 9.3)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 01:35:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2025_62718 #data exfiltration #Hostname Normalization #infosec #NO_PROXY #Node.js Security #ssrf #vulnerability management #web development
Daily CyberSecurity
Critical SSRF Flaw Discovered in Axios - CVE-2025-62718 (CVSS 9.3)
Axios CVE-2025-62718 allows a critical NO_PROXY bypass via hostname normalization errors. Protect your internal network from SSRF—patch or normalize today!
21 views
Daily Writeups
⤷ Title: Attackers Weaponize Mailbox Rules to Control Your Inbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 09:01:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #ATO #ATOLS #Cloud Security #data exfiltration #Email Security #infosec #Mailbox Rules #Microsoft 365 #persistence #Proofpoint
Daily CyberSecurity
Attackers Weaponize Mailbox Rules to Control Your Inbox
In the modern landscape of Microsoft 365 security, the most dangerous threat might not be a sophisticated piece of malware, but a simple, automated setting you likely haven’t checked in year…
17 views
Daily Writeups
⤷ Title: The New Lockdown: How Microsoft’s April 2026 Update Silos Remote Desktop to Kill Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:00:25 +0000
════════════════════════
⌗ Tags: #Windows #cybersecurity #data exfiltration #infosec #Microsoft Update #network_security #Phishing Protection #RDP Security #Remote Desktop Protocol #Windows 11 #Windows Hello
Daily CyberSecurity
The New Lockdown: How Microsoft’s April 2026 Update Silos Remote Desktop to Kill Phishing
Microsoft hardens RDP in the April 2026 update. Discover how new default isolation policies and security warnings stop malicious servers from stealing your data.
15 views
Daily Writeups
⤷ Title: SCP for Data Exfiltration on Pentests
════════════════════════
𐀪 Author: Mark Puckett
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 18:36:01 GMT
════════════════════════
⌗ Tags: #scp #pentesting #penetration_testing #data_exfiltration
Medium
SCP for Data Exfiltration on Pentests
Data exfiltration is an important part of internal pentests and red team engagements. See how SCP can get past network restrictions.
20 views
Daily Writeups
⤷ Title: Microsoft Teams Exploited for Silent Enterprise Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 00:40:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Administrative Protocols #data exfiltration #infosec #lateral movement #Level RMM #Microsoft Defender #Microsoft Teams #Quick Assist #Rclone #social engineering #WinRM
Daily CyberSecurity
Microsoft Teams Exploited for Silent Enterprise Takeovers
Microsoft warns of a Teams campaign using fake IT support to hijack workstations via Quick Assist, move laterally with WinRM, and steal data using Rclone.
31 views
Daily Writeups
⤷ Title: Tactical Evolution: Trigona Ransomware Debuts Custom Exfiltration Armory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 01:32:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AnyDesk #cybersecurity #data exfiltration #infosec #Kernel Drivers #Malware Analysis #mimikatz #Network Evasion #ransomware #Rhantus syndicate #Trigona Ransomware #uploader_client.exe
Daily CyberSecurity
Tactical Evolution: Trigona Ransomware Debuts Custom Exfiltration Armory
Trigona ransomware swaps Rclone for a custom tool that rotates connections to evade monitoring. Learn how uploader_client.exe powers their data theft.
25 views
Daily Writeups
⤷ Title: Checkmarx Falls Victim to Credential Harvesting Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:54:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #breach #Checkmarx #cybersecurity #data exfiltration #GitHub Security #infosec #LAPSUS$ #Malicious code #Software Integrity #supply chain attack #Trivy
Daily CyberSecurity
Checkmarx Falls Victim to Credential Harvesting Attack
Checkmarx discloses a major GitHub breach via a Trivy supply chain flaw. Attackers injected malicious code and exfiltrated data for a month. Get the facts.
29 views
Daily Writeups
⤷ Title: Steganography is Not Invisible: Mengungkap Blind Spot di SOC dari Perspektif Red & Blue Team
════════════════════════
𐀪 Author: Panggil Aku Paman
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:33:09 GMT
════════════════════════
⌗ Tags: #steganography #ethical_hacking #red_team #data_exfiltration #blue_team
Medium
Steganography is Not Invisible: Mengungkap Blind Spot di SOC dari Perspektif Red & Blue Team
Ada satu jenis alert yang jarang membuat SOC panik. Bukan malware, bukan credential theft, bukan exploit aktif. Hanya file gambar, tidak…
15 views
Daily Writeups
⤷ Title: “TanStack”: Malicious Name-Squatting Campaign Steals Environment Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:58:40 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cybersecurity #data exfiltration #DevSecOps #infosec #npm malware #Postinstall Script #supply chain attack #Svix #TanStack #Typosquatting
Daily CyberSecurity
"TanStack": Malicious Name-Squatting Campaign Steals Environment Secrets
A malicious unscoped "tanstack" npm package used live-debugged postinstall scripts to steal .env secrets via Svix webhooks. Check your dependencies now.
18 views
Daily Writeups
⤷ Title: Iranian APT MuddyWater Masquerades as Chaos Ransomware in Elaborate False Flag
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 07:10:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #Chaos Ransomware #cybersecurity #data exfiltration #False Flag #Iran APT #Microsoft Teams #MOIS #MuddyWater #Rapid7 #Seedworm #social engineering #Threat Intel
Daily CyberSecurity
Iranian APT MuddyWater Masquerades as Chaos Ransomware in Elaborate False Flag
Rapid7 unmasks Iranian APT MuddyWater using a Chaos ransomware "false flag" to hide state-sponsored espionage. See how they bypassed MFA via MS Teams.
17 views
Daily Writeups
⤷ Title: AI Hijacked: Critical Claude Chrome Extension Flaw Allows Malicious Scripts to Control Your AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 12:02:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Hijacking #AI security #Anthropic #browser security #Chrome extension #Claude AI #Cyber Security #data exfiltration #infosec #LayerX #LLM Vulnerability
Daily CyberSecurity
AI Hijacked: Critical Claude Chrome Extension Flaw Allows Malicious Scripts to Control Your AI
LayerX uncovers a critical flaw in Anthropic’s Claude extension. Learn how attackers can hijack AI agents to steal data and bypass security policies.
22 views
Daily Writeups
⤷ Title: GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:21:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #data exfiltration #GemStuffer #infosec #Malware Analysis #ModernGov #Ruby Security #RubyGems #Socket #supply chain attack #UK Council Security
Daily CyberSecurity
GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
GemStuffer exploits RubyGems as an illicit data transport to scrape UK council portals. Discover how this supply chain attack bypasses standard defenses.
26 views
Daily Writeups
⤷ Title: Stealth & Automation: Seedworm’s 2026 Global Campaign Hijacks Security Software to Deploy ChromElevator
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 08:05:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #ChromElevator #cyber_espionage #data exfiltration #DLL Sideloading #Espionage #infosec #Iranian APT #MuddyWater #Node.js Malware #Seedworm #SentinelOne #threat intelligence
Daily CyberSecurity
Stealth & Automation: Seedworm’s 2026 Global Campaign Hijacks Security Software to Deploy ChromElevator
Iranian group Seedworm infiltrates global firms using automated Node.js scripts and DLL sideloading via trusted binaries. Protect your credentials now!
32 views
Daily Writeups
⤷ Title: Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
Daily CyberSecurity
Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
The Dangerous Scope of Browser Data Exfiltration Artificial Intelligence has rapidly transformed how we work and communicate every single day. Therefore, millions of professionals now rely on auto…
11 views
Daily Writeups
⤷ Title: SQL Server 2025 AI Features Enable Data Exfiltration
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 07:33:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Artificial intelligence #Cyber Security #Data Exfiltration #SpecterOps #SQL Server 2025
Information Security News
SQL Server 2025 AI Features Enable Data Exfiltration
Discover how attackers exploit new SQL Server 2025 AI features. SpecterOps researchers reveal methods for data exfiltration and command communication.
12 views
Daily Writeups
⤷ Title: No Network Required: Building an Acoustic Data Channel with Python for data exfil — Part 1
════════════════════════
𐀪 Author: KeyboardSamurai
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 11:37:36 GMT
════════════════════════
⌗ Tags: #data_exfiltration #cybersecurity #radio_hackers #rf_hacking #hacking
Medium
No Network Required: Building an Acoustic Data Channel with Python for data exfil — Part 1
Beyond the Air Gap — Part 1
9 views
Daily Writeups
⤷ Title: No Network Required: When Nyquist Met Real Hardware — Part 2
════════════════════════
𐀪 Author: KeyboardSamurai
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 21:42:06 GMT
════════════════════════
⌗ Tags: #radio_hackers #data_exfiltration #hacking #cybersecurity #rf_hacking
Medium
No Network Required: When Nyquist Met Real Hardware — Part 2
Recovering a Near-Ultrasonic Acoustic Channel with Python
14 views
Daily Writeups
⤷ Title: Alleged Data Exfiltration from Paraguayan Public Institutions Websites (Sep/2026)
════════════════════════
𐀪 Author: Alex
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 06:41:24 GMT
════════════════════════
⌗ Tags: #data_exfiltration #hacking #paraguay #cybersecurity
Medium
Alleged Data Exfiltration from Paraguayan Public Institutions Websites (Sep/2026)
A threat actor known a Zumarius has claimed to have exfiltrated data from Paraguayan Public Institutions, publishing the leaks (or samples…
23 views
Daily Writeups
⤷ Title: SafePay Ransomware Hits 600 Victims as FBI, CISA and Allies Issue Joint Warning
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 07:12:32 +0000
════════════════════════
⌗ Tags: #Malware #CISA #Critical Infrastructure #data exfiltration #fbi #living_off_the_land #ransomware #SafePay ransomware #StopRansomware advisory #VPN security
Daily CyberSecurity
SafePay Ransomware Hits 600 Victims as FBI, CISA and Allies Issue Joint Warning
At a glance Malware family SafePay ransomware (encrypted files end in .SafePay) Threat actor SafePay ransomware group; no individuals named Targets At least 600 victims across critical infrastruct…
7 views